O23 - Service: exp1orer (Microsoft Explorer) - Unknown owner - E:\WINDOWS\exp1orer.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\Windows\system32\nvsvc32.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - Service: winngmt (Windows Management Instrumenta) - Unknown owner - E:\Windows\winngmt.exe
O23 - Service: WinHTTP Web Proxy Discove - Unknown owner - E:\WINDOWS\Explore.exe (file missing)
O23 - Service: winser - Unknown owner - E:\Windows\system32\winsersec.exe

高手帮忙看看分析一下，感谢了！

O23 - Service: exp1orer (Microsoft Explorer) - Unknown owner - E:\WINDOWS\exp1orer.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\Windows\system32\nvsvc32.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - Service: winngmt (Windows Management Instrumenta) - Unknown owner - E:\Windows\winngmt.exe
O23 - Service: WinHTTP Web Proxy Discove - Unknown owner - E:\WINDOWS\Explore.exe (file missing)
O23 - Service: winser - Unknown owner - E:\Windows\system32\winsersec.exe

谢谢了，我会试一试。谢谢。

对了，原来还有灰鸽子的，我试着用瑞星及手工清了一下，有病毒记录参考。
？？？怎贴不了图呢？？？
贴个记录吧：

病毒名称                                                处理结果        扫描方式        路径            文件            病毒来源       

Backdoor.GPigeon.xb                                                    实时监控        E:\WINDOWS      KING_HOOK.DLL\本机
Backdoor.GPigeon                                        清除成功        手动扫描                        csrss.exe>>E:\Windows\King_HOOk.DLL\本机
Backdoor.GPigeon                                        清除成功        手动扫描                        lsass.exe>>E:\Windows\King_HOOk.DLL\本机
Backdoor.GPigeon                                        清除成功        手动扫描                        IEXPLORE.EXE>>E:\Windows\King.DLL\本机
Backdoor.GPigeon                                        清除成功        手动扫描                        CCENTER.EXE>>E:\Windows\King_HOOk.DLL\本机
Worm.Mail.Fanbot                                        清除成功        手动扫描                        Explorer.EXE>>E:\Windows\Explorer.EXE\本机
Backdoor.GPigeon                                        删除成功        手动扫描        E:\WINDOWS      King.DLL\本机
Backdoor.GPigeon.xb                                    删除成功        手动扫描        E:\WINDOWS      King_HOOk.DLL\本机
Backdoor.GPigeon                                        删除成功        实时监控        E:\Windows      King.DLL\本机
Hack.PswCracker                                        删除成功        手动扫描       
Backdoor.GPigeon.xb                                    删除成功        实时监控        E:\Windows      King_HOOk.DLL\本机
Backdoor.GPigeon                                        忽略            实时监控        E:\WINDOWS      King.DLL\本机
Backdoor.GPigeon                                        忽略            实时监控        E:\WINDOWS      King.DLL\本机

感谢给予帮助的朋友！
安全模式下--已清除以下项
O23 - Service: exp1orer (Microsoft Explorer) - Unknown owner - E:\WINDOWS\exp1orer.exe (file missing)
O23 - Service: WinHTTP Web Proxy Discove - Unknown owner - E:\WINDOWS\Explore.exe (file missing)
O23 - Service: winser - Unknown owner - E:\Windows\system32\winsersec.exe
修复这两项，删除了关联文件，重启瑞星不再报有木马，但：O23 - Service: winngmt (Windows Management Instrumenta) - Unknown owner - E:\Windows\winngmt.exe清除后重启后又再出现，但winngmt.exe已删除，该项是否木马？？值得探讨。
附清除病毒后扫描日记，
Logfile of HijackThis v1.99.1
Scan saved at 23:55:50, on 2005-11-8
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\Windows\system32\nvsvc32.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - Service: winngmt (Windows Management Instrumenta) - Unknown owner - E:\Windows\winngmt.exe (file missing)